Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/jdvuTorDq5ACobljBCGEGVMUPp0.roa
File:                     jdvuTorDq5ACobljBCGEGVMUPp0.roa (raw, json)
Hash identifier:          excXcsqpbYQ1G4WLQ/JDFdbMyCDTf5OTrQXUwBQ9NEc=
Subject key identifier:   8D:DB:EE:4E:8A:C3:AB:90:02:A1:B9:63:04:21:84:19:53:14:3E:9D
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       F5
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/jdvuTorDq5ACobljBCGEGVMUPp0.roa
Signing time:             Tue 31 Mar 2026 08:29:58 +0000
ROA not before:           Tue 31 Mar 2026 08:29:58 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4685
IP address blocks:        61.114.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 13:15:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 245 (0xf5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Mar 31 08:29:58 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=8DDBEE4E8AC3AB9002A1B9630421841953143E9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:cf:f1:7a:02:15:19:25:fc:73:0a:ee:5b:6b:
                    30:19:5c:d2:03:e6:48:83:c8:4f:ff:43:16:02:81:
                    32:d3:b1:94:44:81:48:40:70:85:22:8c:50:c1:74:
                    0d:b7:79:ed:df:01:96:45:5a:a2:27:1d:63:f7:b6:
                    7a:2b:79:e2:d8:36:f2:5c:40:c0:ab:cd:a1:82:f5:
                    79:a0:8b:dc:8a:4d:88:24:7a:e3:d1:c3:71:2f:d3:
                    6f:ae:20:33:af:d9:bb:62:a0:3c:31:00:01:1d:f4:
                    19:52:9c:ed:ba:09:27:86:09:bb:ea:60:8b:32:16:
                    50:15:97:a8:e5:8a:5d:94:3c:1b:6d:b4:ea:f8:8c:
                    58:c2:94:93:bc:be:b2:d6:33:d0:b1:f7:10:ea:c3:
                    7d:f4:04:59:d8:ed:ed:5a:13:ae:a8:96:1f:96:ab:
                    53:00:06:93:c7:51:3f:6f:53:c7:6e:fa:1d:4c:59:
                    06:6d:62:7b:29:e9:9c:73:6a:1c:4e:a6:88:75:e0:
                    1b:a5:0e:84:e6:78:1b:87:a7:af:8c:fa:be:6f:b6:
                    b5:3a:37:50:8d:73:37:26:3d:40:0c:fa:2a:db:ac:
                    05:78:db:b8:e5:ba:bc:45:44:57:03:0e:7e:d0:84:
                    36:b4:c1:bb:15:bf:d1:15:35:a4:2c:bd:49:51:da:
                    9d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:DB:EE:4E:8A:C3:AB:90:02:A1:B9:63:04:21:84:19:53:14:3E:9D
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/jdvuTorDq5ACobljBCGEGVMUPp0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.114.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         d1:ef:b1:3d:d1:0d:5f:bf:1d:c1:e7:73:95:c6:97:99:13:41:
         24:ed:14:af:a0:20:66:61:ae:6b:53:d6:2f:47:28:4b:ca:0d:
         13:00:4f:22:75:a8:24:61:b3:2a:38:91:f5:05:5d:30:c4:95:
         6a:85:2b:a6:77:a2:99:0f:a0:bd:50:33:cb:f9:58:1d:59:7c:
         fb:2f:d4:17:82:f2:b2:d2:64:35:98:db:ab:c9:f7:9e:c1:f3:
         a1:2e:1f:c3:ff:5b:a9:5a:b2:f5:03:de:f2:2e:fc:b0:c4:33:
         e9:23:1c:92:bd:e0:ac:ae:12:b7:06:7e:6b:16:38:05:e9:77:
         41:60:cf:5f:60:83:66:64:68:a6:09:a8:e5:00:12:f0:97:56:
         44:a7:5e:ef:8c:e4:2e:d5:ec:11:4c:17:12:4a:4f:41:fa:e9:
         c7:15:4f:58:19:cc:ee:5d:43:2b:39:0d:ef:80:0c:1e:36:59:
         ed:e9:f7:0a:66:14:d3:0b:e4:ac:95:9d:79:ad:b1:39:4d:82:
         a6:e4:04:22:85:0c:7f:49:91:f1:ef:27:fa:7c:68:26:61:9e:
         08:c2:ef:c1:5d:9f:4b:98:e2:43:2e:6c:de:6c:8c:ff:c5:3d:
         f1:cc:be:e9:b4:e8:d8:92:44:ef:4a:ad:5e:30:48:f1:ba:be:
         f8:36:7d:9a
-----BEGIN CERTIFICATE-----
MIIEuzCCA6OgAwIBAgICAPUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUJF
M0FCMEY4REIyNjVBQkIyMjg3RTc1MTUxRTdGNUE5M0IyQzczNjAeFw0yNjAzMzEw
ODI5NThaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDhEREJFRTRFOEFDM0FC
OTAwMkExQjk2MzA0MjE4NDE5NTMxNDNFOUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+z/F6AhUZJfxzCu5bazAZXNID5kiDyE//QxYCgTLTsZREgUhA
cIUijFDBdA23ee3fAZZFWqInHWP3tnoreeLYNvJcQMCrzaGC9Xmgi9yKTYgkeuPR
w3Ev02+uIDOv2btioDwxAAEd9BlSnO26CSeGCbvqYIsyFlAVl6jlil2UPBtttOr4
jFjClJO8vrLWM9Cx9xDqw330BFnY7e1aE66olh+Wq1MABpPHUT9vU8du+h1MWQZt
Ynsp6ZxzahxOpoh14BulDoTmeBuHp6+M+r5vtrU6N1CNczcmPUAM+irbrAV427jl
urxFRFcDDn7QhDa0wbsVv9EVNaQsvUlR2p0dAgMBAAGjggHXMIIB0zAdBgNVHQ4E
FgQUjdvuTorDq5ACobljBCGEGVMUPp0wHwYDVR0jBBgwFoAUG+OrD42yZauyKH51
FR5/WpOyxzYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzUwL0ctT3JENDJ5WmF1eUtINTFGUjVfV3BPeXh6WS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ctT3JENDJ5WmF1eUtINTFGUjVfV3BP
eXh6WS5jZXIwDgYDVR0PAQH/BAQDAgeAMHAGCCsGAQUFBwELBGQwYjBgBggrBgEF
BQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC81MC9qZHZ1VG9yRHE1QUNvYmxqQkNHRUdWTVVQcDAucm9hMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFPXLAMA0GCSqGSIb3DQEBCwUAA4IBAQDR
77E90Q1fvx3B53OVxpeZE0Ek7RSvoCBmYa5rU9YvRyhLyg0TAE8idagkYbMqOJH1
BV0wxJVqhSumd6KZD6C9UDPL+VgdWXz7L9QXgvKy0mQ1mNuryfeewfOhLh/D/1up
WrL1A97yLvywxDPpIxySveCsrhK3Bn5rFjgF6XdBYM9fYINmZGimCajlABLwl1ZE
p17vjOQu1ewRTBcSSk9B+unHFU9YGczuXUMrOQ3vgAweNlnt6fcKZhTTC+SslZ15
rbE5TYKm5AQihQx/SZHx7yf6fGgmYZ4Iwu/BXZ9LmOJDLmzebIz/xT3xzL7ptOjY
kkTvSq1eMEjxur74Nn2a
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:02:22 2026 by rpki-client